CVE-2011-5124
Stack-based buffer overflow in the BCAAA component before build 60258, as used by Blue Coat...
CVE-2011-5124 is a high vulnerability (CVSS 10.0) in Bluecoat Proxyone, published August 26, 2012. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 54.6%, the 99th percentile. No source names a fixed version.
Stack-based buffer overflow in the BCAAA component before build 60258, as used by Blue Coat ProxySG 4.2.3 through 6.1 and ProxyOne, allows remote attackers to execute arbitrary code via a large packet to the synchronization port (16102/tcp).
Exploit likelihood
What each source reports
NVD Score used
Stack-based buffer overflow in the BCAAA component before build 60258, as used by Blue Coat ProxySG 4.2.3 through 6.1 and ProxyOne, allows remote attackers to execute arbitrary code via a large packet to the synchronization port (16102/tcp).
- Record
CVE-2011-5124- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Stack-based buffer overflow in the BCAAA component before build 60258, as used by Blue Coat ProxySG 4.2.3 through 6.1 and ProxyOne, allows remote attackers to execute arbitrary code via a large packet to the synchronization port (16102/tcp).
- Record
CVE-2011-5124- Updated
- 2026-11-02
EUVDEUVD-2011-5024 No score
Stack-based buffer overflow in the BCAAA component before build 60258, as used by Blue Coat ProxySG 4.2.3 through 6.1 and ProxyOne, allows remote attackers to execute arbitrary code via a large packet to the synchronization port (16102/tcp).
- Record
EUVD-2011-5024- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-56f9-5546-c3g4 No score
Stack-based buffer overflow in the BCAAA component before build 60258, as used by Blue Coat...
Stack-based buffer overflow in the BCAAA component before build 60258, as used by Blue Coat ProxySG 4.2.3 through 6.1 and ProxyOne, allows remote attackers to execute arbitrary code via a large packet to the synchronization port (16102/tcp).
- Record
GHSA-56f9-5546-c3g4- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Blue Coat Authentication and Authorization Agent (BCAAA) 5 - Remote Buffer Overflow (Metasploit) | 2011-07-09 |
| Metasploit | Blue Coat Authentication and Authorization Agent (BCAAA) 5 Buffer Overflow | 2011-04-04 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD |